Configure active content filters (allowlists)

HCL Connections™ provides a set of Active Content Filter (ACF) configuration files that you can apply to component applications to allow users to contribute only approved types of content.

This procedure is optional. Perform it only if you want to change the level of filtering applied by the Active Content Filter.

By default, all Connections applications that use whitelisting allow content with a wide range of HTML tags to be uploaded. Exceptions include scripts (for example, JavaScript), Flash animations, and certain types of styling.

You can refine the whitelist by applying predefined rule sets in a copy of the ojhs-whitelist-default.xml file.

Copy the ojhs-whitelist-default.xml file and modify it for your update.
1. Locate the ojhs-whitelist-default.xml file and make a copy of it with a slightly different name.
  
  For example, add a brief description of the update to the new file's name, as in: ojhs-whitelist-update_description.xml
2. Edit the new file and modify it using the rules described in the topics within this section.
3. Save and close the file.
Modify the acp-configkey__default.xml file to reference the new allowlist XML file (ojhs-whitelist-update_description.xml).
1. Locate the acp-configkey__default.xml file and make a copy of it with a slightly different name.
  
  For example, add a brief description that matches the updated rules file name: acp-configkey__update_description.xml.
2. In the file, update the defaultKey setting to reference the update_description part of the ojhs-whitelist-update_description.xml file name.
  
  For example, if you renamed the file to ojhs-whitelist-pilot.xml in step 1, use "pilot" as the defaultKey value:
```
 <param value="defaultKey=pilot"/>
```
3. Save and close the file.
Modify the LotusConnectionsConfig.xml file so that its sloc entry acf_config_file points to the new acp-configkey__update_description.xml file.

TTo edit configuration files, you must use the wsadmin client. See Starting the wsadmin client for details.

Important

Be sure to leave the wsadmin session open so you can check in the updated file.
1. Enter the following command to load the HCL Connections configuration file:
```
execfile("connectionsConfig.py")
```
  If you are prompted to specify a service to connect to, type 1 to select the first node in the list. Most commands can be run on any node. However, if a command reads from or writes to a file using a local file path, you must select the node where the file is stored. This node selection is not used by the wsadmin client when you are making configuration changes.
2. Enter the following command to check out HCL Connections configuration files:
```
LCConfigService.checkOutConfig("working_directory","cell_name")
```
  where:
  - working_directory is the temporary working directory to which configuration files are copied. The files are kept in this working directory while you edit them.
    Note
    - When you specify a path to the working directory on a system that is running Microsoft® Windows®, use a forward slash for the directory. For example: C:/temp.
    - Linux® only: The directory must grant write permissions or the command fails.
  - cell_name is the name of the WebSphere® Application Server cell that hosts the HCL Connections application. If you do not know the cell name, display it by typing the following command in the wsadmin client:
```
print AdminControl.getCell()
```
    Note
    
    This input parameter is case-sensitive.
3. Open the LotusConnections-config.xml file in a text editor.
4. Find the <sloc:serviceReference> element for the application for which you want to change filtering levels. The application name is specified in the serviceName attribute.
5. Add the acp-configkey__default-update_description.xml file name to the acf_config_file= element as shown in the following example.
```
<sloc:serviceReference 
 bootstrapHost="myServer.example.com" 
 bootstrapPort="2817" 
 clusterName="" 
 enabled="true" 
 serviceName="blogs" 
 ssl_enabled="true" 
 **acf_config_file="acp-configkey__pilot.xml">**
  <sloc:href>
    <sloc:hrefPathPrefix>/blogs</sloc:hrefPathPrefix>
    <sloc:static 
     href="http://enterprise.example.com:9082" 
     ssl_href="https://enterprise.example.com:9447"/>
    <sloc:interService href="https://enterprise.example.com:9447"/>
  </sloc:href>
</sloc:serviceReference>
```
6. Save and close the LotusConnections-config.xmlfile.
7. After making changes, you must check the configuration files back in during the same wsadmin session in which you checked them out. See Applying common configuration property changes for information about how to save and apply your changes.
Synchronize the nodes using the Integrated Solutions Console for the network deployment system.
Restart the WebSphere Application Server.

See the following topics for more information about the rules you can apply to the allowlist:

URL protocol rules (whitelists)
Whitelist active content for HCL Connections based on the protocol specified within URLs.

Element and attribute rules (whitelists)
Whitelist active content for HCL Connections based on elements and attributes used in the HTML source.

Styling rules (whitelists)
Whitelist active content for HCL Connections based on stylesheet usage in the HTML source.

Parent topic: Active content filters (whitelists)